The at daemon must not execute programs in, or subordinate to, world-writable directories.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-989	GEN003380	SV-38555r1_rule	DCSL-1	Medium

Description
If at programs are located in, or subordinate, to world-writable directories, they become vulnerable to removal and replacement by malicious users or system intruders.

STIG	Date
HP-UX 11.31 Security Technical Implementation Guide	2018-09-14

Details

Check Text ( C-36462r1_chk )
List any at jobs on the system. # ls -lLa /var/spool/cron/atjobs For each at job, determine which programs are executed by at. # more Check the directory containing each program executed by at for world-writable permissions. # ls -lL If at executes programs in world-writable directories, this is a finding.

Fix Text (F-31802r1_fix)
Remove the world-writable permission from directories containing programs executed by at. # chmod o-w